Intercepting Native iOS Application Traffic

Ben Tindell covers four iOS SSL pinning bypass techniques with Burp Suite: installing a custom CA, SSLKillSwitch tooling, runtime hooking with Objection and Frida, and patching the IPA binary.

Tampering with iOS Game Center leaderboards by proxying traffic through Burp and rewriting the submitScores score-value to the maximum signed integer, exposing weak server-side validation.

Kubernetes CVE-2020-8554 is a design-level MitM flaw affecting all versions and unpatchable: tenants with routing control can intercept other tenants' traffic, a multi-tenant isolation lesson.

Kevin Robertson expands on ADIDNS attacks, covering why WPAD records fail against the global query block list and demonstrating GQBL bypasses with wildcard, DNAME, and NS records.

Kevin Robertson argues ADIDNS beats LLMNR/NBNS spoofing for MITM attacks in AD environments: attackers with unprivileged access can add wildcard records that intercept name resolution domain-wide.

Covers four Android SSL pinning bypass techniques of rising difficulty: injecting a custom CA, swapping packaged certs, hooking checks with Frida, and reversing custom certificate validation code.